Hi Stephane, On 2017/11/13 10:10 , Stephane Bortzmeyer wrote: > I cannot get the certificate for <https://dns-resolver.yeti.eu.org/> > (measurement #10174881): "alert" is "{u'description': 40, u'level': > 2}". > > It works with other, more "mainstream", HTTPS sites (see #10174883). I > suspect this is because the probes don't handle the recent TLS > stuff. Can anyone confirm or infirm?
The only issue I'm aware of is SNI. We added that in 4780. SNI or no SNI doesn't seem to make a difference to dns-resolver.yeti.eu.org Hmm, looking at the list of ciphers that the measurement code sends, I can see how it can fail if somebody applies a rather script security policy. I'll create a ticket to add improved ciphers. Philip